Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/V44AqOKWJp1uhnEcwiIF2DRSrLc.roa
File: V44AqOKWJp1uhnEcwiIF2DRSrLc.roa (raw, json)
Hash identifier: lbLJDiobkR/P37AHGkAuFOJVY2rSQ8/5wHub/+skEUE=
Subject key identifier: 57:8E:00:A8:E2:96:26:9D:6E:86:71:1C:C2:22:05:D8:34:52:AC:B7
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 01856D7892CBFF237AEA71C73465AAB4C5BA
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/V44AqOKWJp1uhnEcwiIF2DRSrLc.roa
Signing time: Sun 01 Jan 2023 13:14:56 +0000
ROA not before: Sun 01 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201223
IP address blocks: 193.134.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:92:cb:ff:23:7a:ea:71:c7:34:65:aa:b4:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jan 1 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578e00a8e296269d6e86711cc22205d83452acb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:88:2e:7c:8f:cd:2e:d8:d7:3e:9a:5e:9d:09:
c0:ed:af:9b:b1:91:69:6d:26:bb:b6:b2:be:db:64:
2d:22:06:d8:56:80:2d:c1:d2:44:6e:d3:4a:20:94:
34:f8:e0:df:0d:dd:2d:35:c2:6c:83:ba:4d:be:c0:
16:36:0b:51:4f:9f:be:2f:f2:41:ed:02:ce:97:a1:
36:27:1a:b7:eb:42:b0:dd:26:50:65:65:ac:94:7a:
b0:68:57:e1:61:5d:0c:6e:cd:4f:da:b2:a0:7e:e7:
be:cc:54:d6:f4:ef:c1:60:04:49:f4:df:6a:48:9e:
87:6c:fd:5e:85:2c:f8:74:d1:01:4e:4d:42:b3:77:
0a:45:c5:e8:4a:6f:f3:77:36:e8:fc:30:c5:d3:7f:
ea:9a:cf:83:6f:42:dc:c9:85:c8:5e:52:5e:a5:28:
e7:28:2c:e1:9f:60:1c:d0:c3:ca:e6:8f:63:19:8d:
c5:b2:b8:39:81:52:4f:3b:2d:5f:ba:f7:f1:c6:a1:
94:3b:3b:5a:f8:29:58:12:5e:73:34:76:a8:c0:84:
5e:eb:3e:aa:cc:ee:f4:78:66:ea:b5:88:9e:63:7e:
59:de:49:33:d4:6b:4b:15:63:a0:9e:c7:78:df:81:
03:ea:db:7e:45:1f:4b:83:39:36:f6:3f:65:01:1a:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:00:A8:E2:96:26:9D:6E:86:71:1C:C2:22:05:D8:34:52:AC:B7
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/V44AqOKWJp1uhnEcwiIF2DRSrLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.163.0/24
Signature Algorithm: sha256WithRSAEncryption
01:75:69:c2:45:d0:57:f9:69:38:ce:ea:ae:94:30:fd:88:0c:
f0:73:9b:5f:ec:26:0c:83:e5:dc:c9:56:1c:3e:49:92:56:64:
8f:3b:2d:c2:d0:c9:85:0f:66:d7:39:b1:35:33:9a:7d:2d:2d:
2c:f0:9d:08:f5:98:ba:ab:69:e6:7c:dd:4d:77:75:95:62:fd:
5b:2e:fd:24:fc:a3:57:d0:f1:d1:c5:37:00:7f:ee:10:e4:fd:
1b:af:d0:84:04:d9:2b:10:8e:dd:98:a9:ae:9c:63:7d:77:02:
14:dd:3d:27:27:c6:9f:13:fe:83:0d:73:9f:08:78:84:32:6b:
33:4f:19:af:fc:db:0e:b4:db:f6:96:08:d6:37:7e:86:a0:08:
f6:72:9b:7a:2c:eb:d5:a5:0c:1b:f1:bb:3f:4b:ee:af:d2:87:
20:ab:d1:ac:4b:63:17:4e:eb:50:7c:f0:52:50:eb:31:86:a5:
76:e2:0e:02:36:48:a1:e9:b8:27:d6:7d:fd:41:71:51:cd:ca:
f3:f5:ff:ee:2e:58:d1:e1:91:93:bc:2f:83:80:3f:7b:3c:30:
32:67:cf:f6:5b:97:d1:e0:fa:5c:0c:d1:15:95:e5:32:a0:4e:
4f:85:3b:c8:b4:7f:d1:58:82:d5:53:6d:00:8f:ff:83:e2:1d:
fa:44:63:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteJLL/yN66nHHNGWqtMW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NWVmNGJkMjk3NmJmMjkyYWI3MzMwNDkwN2Y1MTBjZDAw
Y2M4YTIwHhcNMjMwMTAxMTMxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzhlMDBhOGUyOTYyNjlkNmU4NjcxMWNjMjIyMDVkODM0NTJhY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4gufI/NLtjXPppenQnA7a+bsZFp
bSa7trK+22QtIgbYVoAtwdJEbtNKIJQ0+ODfDd0tNcJsg7pNvsAWNgtRT5++L/JB
7QLOl6E2Jxq360Kw3SZQZWWslHqwaFfhYV0Mbs1P2rKgfue+zFTW9O/BYARJ9N9q
SJ6HbP1ehSz4dNEBTk1Cs3cKRcXoSm/zdzbo/DDF03/qms+Db0LcyYXIXlJepSjn
KCzhn2Ac0MPK5o9jGY3Fsrg5gVJPOy1fuvfxxqGUOzta+ClYEl5zNHaowIRe6z6q
zO70eGbqtYieY35Z3kkz1GtLFWOgnsd434ED6tt+RR9Lgzk29j9lARpd0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFeOAKjiliadboZxHMIiBdg0Uqy3MB8GA1UdIwQY
MBaAFHhe9L0pdr8pKrczBJB/UQzQDMiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmIt
N2Q0ZmE0Y2RjN2EyLzEvVjQ0QXFPS1dKcDF1aG5FY3dpSUYyRFJTckxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmItN2Q0ZmE0Y2RjN2Ey
LzEvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYajMA0G
CSqGSIb3DQEBCwUAA4IBAQABdWnCRdBX+Wk4zuqulDD9iAzwc5tf7CYMg+XcyVYc
PkmSVmSPOy3C0MmFD2bXObE1M5p9LS0s8J0I9Zi6q2nmfN1Nd3WVYv1bLv0k/KNX
0PHRxTcAf+4Q5P0br9CEBNkrEI7dmKmunGN9dwIU3T0nJ8afE/6DDXOfCHiEMmsz
Txmv/NsOtNv2lgjWN36GoAj2cpt6LOvVpQwb8bs/S+6v0ocgq9GsS2MXTutQfPBS
UOsxhqV24g4CNkih6bgn1n39QXFRzcrz9f/uLljR4ZGTvC+DgD97PDAyZ8/2W5fR
4PpcDNEVleUyoE5PhTvItH/RWILVU20Aj/+D4h36RGOr
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:55 2024 by rpki-client on console.sobornost.net